About this policy

Here at MSite we take the management of all personal data extremely seriously.

This policy has been updated for the General Data Protection Regulation and illustrates how we use your personal data when you use visit our website www.msite.com.

We have provided this policy to ensure that you understand what personal data we may collect and hold about you, what we may use it for and how we keep it safe. You have legal rights to access the personal data that we hold about you and to control how we use it which are also explained.

Should you wish to understand how we will process data collected about you in connection to our services (MSite Platform) or products see here

Last Updated: August 1st, 2024

MSite Website Privacy Policy

Here at Infobric Ltd. and its subsidiaries d/b/a MSite (collectively, “MSite,” “we” or “us”), we take the management of all personal data extremely seriously.

This Website Privacy Policy (“Policy”) applies to individuals who visit our website at www.msite.com ("Site”), purchase our products and services, and / or access any other websites, pages, features, or content owned and operated by us that direct to this Privacy Policy (collectively, the “Service(s)”).

We have provided this Policy to help you understand what personal data we may collect and hold about you, what we may use it for and how we keep it safe. This Policy also provides information about your choices and/or legal rights to access the personal data that we hold about you and to control how we use it.

Please read the following carefully to understand our practices regarding your personal data and how we will treat it. This Policy together with our terms and conditions, as set out at here and any additional terms of use, applies to your use of the Services. If you are not comfortable with any part of this Policy or our terms and conditions, please immediately discontinue access or use of our Services. We may make changes to this Policy from time to time. The “Last Updated” date at the top of this page indicates when this Privacy Policy was last revised. If we make material changes to this Privacy Policy, then we will notify you as required by law. Any changes to this Policy will become effective on the “Last Updated” date indicated above.

1. Who Are We and How Can You Contact Us

We are Infobric Ltd trading as MSite (“MSite”, “we”, “us” or “our”). We are based in Liverpool, UK.

MSite develop technology which automates and digitises the identity of people in some of the world’s most demanding and highly regulated workplaces. In providing our services to customers who purchase our products and services ("Principal Contractors”), we process personal data on behalf of, and at the direction of, our Principal Contractors. When we process personal data on behalf of Principal Contractors, MSite acts as a “Data Processor”, and the Principal Contractors are “Data Controllers”. This Policy does not apply to the processing of personal data when we act as a Data Processor. Please refer to our Platform Privacy Policy https://www.msite.com/terms-conditions for more information on how we process personal data as a Data Processor.

MSite is the Data Controller of your personal data as described in this Policy, such in relation to the processing of information you enter via the Site to obtain marketing information about our company, or in relation to the onboarding of our commercial customers.

We are registered with the Information Commissioners Office (“ICO”) under reference: ZA068354

Our registered office address is at:

The Bunker, 25 Innovation Blvd, Liverpool, United Kingdom, L7 9PW

You can contact us in writing at the address above or by emailing: support@msite.com

If you would like to speak to us, please call us on +44(0)333 456 2001

2. What Personal Data Do We Collect

Personal data (used interchangeably in this Policy with “personal information”) generally refers to any information that identifies or makes an individual identifiable, The definition of personal data depends on the applicable law based on your residence. Only the definition that applies to where you reside will apply to you under this Policy.

Most of the personal data we process is provided to us directly by you for the purpose of providing you with our Services, such as when you contact us by email or social media, when you have a commercial contract with us as a supplier or retailer. We may also automatically collect information about your use of our Services, and collection certain information from third parties.

Information You Voluntarily Provide to Us. Personal information we collect on or through our Services may include:

Business Contact Information. We collect and process contact information about our clients, customers, suppliers, subcontractors, stakeholders, business partners or joint venture partners in order to carry out our obligations arising from any contracts and to provide the information, products and services request from us, which may include, your first and last name, email address, postal address, telephone number, company, title, and any information you have made public in connection with that service.
Account Information. When you create an account on our platform, you provide us with some basic details necessary for the service to work and to set up your profile. These may include your full name, email address, phone number, username, marketing preferences and profile picture.
Customer Service. We may collect the content of messages you send to us, such as feedback or questions you ask our technical support representatives, when necessary to provide you with the Services you use. When you contact us, phone conversations or chat sessions with our representatives may be monitored and recorded in order to improve our services, facilitate the processing and resolution of your request or complaint.
Email List Sign-ups. You may choose to provide us your contact details, such as your email address, if you wish to receive information about the products and services that we offer. We may also collect your preferences in receiving marketing from us and our third parties and your communication preferences.
Payment and Transaction Data. We may collect data necessary to facilitate with your purchase of our products and services and to process your payment, such as your business bank account and / or payment card details, billing address, details about payments to and from you and other details of products and services you have purchased from us.
Web Forms. We may collect your first and last name, email address, and other additional information you choose to provide when you inquire about our products or services, submit a request, or would like to get in touch with our customer support for other matters. If you provide contact information, we may contact you to respond to your inquires, to learn about your level of interest in, or satisfaction with our Services.

Information Collected Automatically. As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions and patterns, including:

Technical Data. When you browse our Site, our systems automatically collect information such as your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Performance Data. We may collect information about your preferences to make your use of the Services more productive, via the use of cookies or similar tracking technologies. For more information about how we collect your information automatically, please see the “Cookies and Other Tracking Technologies” Section below.
Location Data. When you use our Services, we may infer the generic physical location and geographic regions of your device from your Wi-Fi, Bluetooth and other device settings. For example, your IP address may indicate your general geographic region, such as your city and zip code. You may choose not to share your location details with us by adjusting your mobile or desktop device’s location services settings. For instructions on changing the relevant settings, please contact your service provider or device manufacturer.

Information From Third Parties. From time to time, we may obtain information about you from other organisations or public sources as required or permitted by law. These sources may include:

Marketing Partners and Analytics Providers. Unless prohibited by applicable law, we may obtain your personal data from marketing partners and analytics providers so that we can better understand which of our Services may be of interest to you and to provide us information necessary to improve our Services.

3. How We Use Your Personal Data

We use your personal data as described in this Policy for business and commercial purposes, or as disclosed to you prior to such processing taking place. We may process your personal data:

To Fulfil Purchases and to Provide Our Services. We will use your personal data to provide information or perform products or services that you request, such as creating and managing user accounts, processing your purchase orders, and carrying out our obligations arising from any contracts.
To Provide You with Service-Related Communications. We will send you administrative or account-related information to keep you updated about your account and the Services. Such communications may include information about Privacy Policy updates, security updates, tips or other relevant transaction-related information. Service-related communications are not promotional in nature. You are not able to unsubscribe from such communications, otherwise you may miss important developments relating to your account or the Services.
To Maintain Legal and Regulatory Compliance. Our Services are subject to certain laws and regulations which may require us to process your personal data. For example, we process your personal data to fulfil our business obligations, ensure compliance with industry regulator’s standard and policies, to manage risk as required under applicable laws and regulations, or to respond to requests by judicial process or governmental agency.
To Enforce Compliance with Our Terms, Agreements and Policies. When you access or use our Services, you are bound to our Terms. We may process your personal data for compliance purposes, such as carrying out our obligations and enforcing our Terms or other legal rights, including those arising from any contracts entered into between you and us, including for billing and collection.
To Detect and Prevent Fraud and Security Risks. We may process your personal data to help monitor, prevent and detect fraud and abusive use of our Service, monitor and verify your identity so that unauthorized users do not gain access to your information, enhance system security, and combat spam, malware, malicious activities or other security risks.
To Provide Customer Support or Respond to You. We collect any information that you provide to us when you contact us. Without your personal data, we cannot respond to you or ensure your continued use and satisfaction of the Services.
To Provide Marketing Communication. We may collect your email address, phone number or other electronic addresses that you voluntarily provide to us when you subscribe to our marketing communications. We will occasionally send you information on products, services and promotions. When you no longer wish to receive these marketing messages from us, you can opt out at any time by using the “Unsubscribe” link that appears at the bottom of such messages and following instructions contained within. If you have created an account with us, you can also change your marketing preference within your account settings. For individuals using or accessing our Service while located in the European Economic Area, the United Kingdom, Switzerland, if you have given your consent to receive marketing emails you can withdraw this at any time, or if we are relying on our legitimate interests to send you marketing you can object. In either case, just let us know.
To Research and Develop of Our Services. We may process your personal data and derive analytical and statistical data to better understand the way you use and interact with our Services. For instance, analysing where, on which types of devices and how our Site is used, how many visitors we receive, and where they click on the Site may help us improve our existing Services and to build new Services.
To Personalize Your Experience. We may process your information to personalize your experience. By personalization, we enable you to interact with our Services more easily across platforms and devices.
To Facilitate Corporate Acquisitions, Mergers and Transactions. We may process any information regarding your account and your use of our Services as is necessary in the context of corporate acquisitions, mergers or other corporate transactions.
With Your Consent. For any other purpose disclosed to you prior to you providing us your personal data or which is reasonably necessary to provide the services or other related services requested, with your permission or upon your direction.

4. Cookies and Similar Tracking Technologies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. The file is added, and the cookie helps analyse web traffic or lets you know when you visit a particular site.

Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use the following types of cookies:

Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website or make use of services.

Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Marketing cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

If you use your browser settings to block all cookies (including necessary cookies) you may not be able to access all or parts of our website.

Third parties may also use cookies, over which we have no control. To deactivate the use of third-party advertising cookies, you may visit the third party’s page to manage the use of these types of cookies.

More information about our Cookie Policy can be found here.

5. Information We Share

We only ever share your personal data as needed to fulfil the purposes described in this Policy and as permitted by applicable law. We may disclose your personal information as described below.

With Our Service Providers. We may share your personal information with third-party service providers acting on our behalf to help us operate our Services. Service providers and vendors provide us with support services such as credit card processing, website hosting, community and feedback management, analytics services, surveys and research services, and network maintenance. We only provide these third parties with the information they need to know to perform their specific services. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. Our contracts with these third parties make it clear that they must hold personal data securely, abide by the principles and provisions of data protection rules, and only use information as we instruct them to. In all instances where we disclose your information to third parties, we will ensure that your information is appropriately protected.
Within Our Corporate Organization. We may share your personal information within our organization, to provide you with the Services and take actions based on your request, such as our parent company, subsidiaries, and corporate affiliates, joint venturers, or other companies under common control with us.
During Business Transaction or Other Asset Transfers. We may disclose personal data to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by us about our Services users is among the assets transferred. You agree to and do hereby consent to our assignment or transfer of rights to your personal information, unless you contact us and ask to be opted out of any such business transaction sharing, in which case we will promptly do so.
For Legal Compliance & Safety. We may access, preserve, and disclose information about you if we believe doing so is required or appropriate to (1) comply with law enforcement requests and legal processes, such as a court order or subpoena; (2) comply with requests from auditors, examiners or other regulators; (3) exercise, establish or defend our legal rights; or (4) protect the rights, property, or safety of our customers, ourselves or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
With Our Business Partners. Subject to applicable law, we may share your personal data with our business partners, such as with analytics and search engine providers that assist us in the improvement and optimisation of our Services, or marketing partners for permitted marketing purposes.
With Your Consent. We may share your personal information for any other purpose disclosed to you prior to you providing us your personal information or which is reasonably necessary to provide the services or other related services requested, with your permission or upon your direction.

6. Where Your Personal Data May Be Processed

Your personal data will be stored on systems with technical and organisational security measures and controls located within the UK.

Sometimes we will need to share your personal data with third parties and suppliers outside the UK such as Europe and the USA.

If we do this, we have procedures in place to ensure your personal data receives the same protection as if it were being processed inside the UK. For example, our contracts with third parties stipulate the standards they must follow at all times.

Any transfer of your personal data will follow applicable laws and we will follow the guiding principles of this policy.

8. Additional Notice to Individuals in the European Economic Area, the United Kingdom, and Switzerland

This section only applies to individuals using or accessing our Service while located in the European Economic Area, the United Kingdom, Switzerland (collectively, the “European Countries”), at the time of data collection.

We may ask you to identify which country you are located in when you use or access some of the Services, or we may rely on your IP address to identify which country you are located in. When we rely on your IP address, we cannot apply the terms of this section to any individual that masks or otherwise hides their location information from us so as not to appear located in European Countries. If any terms in this section conflict with other terms contained in this Policy, the terms in this section shall apply to individuals in a European Country.

Legal Bases for Processing Your Personal Information

Section & Purpose of Processing	Legal Bases for Processing
Section 3(c) To Maintain Legal and Regulatory Compliance. Section 3(e) To Detect and Prevent Fraud and Security Risks. Section 5(d) For Legal Compliance & Safety.	Based on our legal obligations. Article 6(1) lit.(c) GDPR.
Section 3(a) To Fulfill Orders and to Provide Our Services. Section 3(b) To Provide You with Service-Related Communications. Section 3(d) To Enforce Compliance with Our Terms, Agreements and Policies. Section 3(f) To Provide Customer Support or Respond to You. Section 5(a) With Our Service Providers Section 5(b) Within Our Corporate Organization. Section 5(e) With Our Business Partners	Based on our contract with you or to take steps at your request prior to entering a contract. Article 6(1) lit.(b) GDPR.
Section 3(h) To Research and Develop Our Services. Section 3(i) To Personalize Your Experience. Section 3(j) To Facilitate Corporate Acquisitions, Mergers and Transactions.	Based on our legitimate interest to operate our business and not overridden by your data protection interests or fundamental rights and freedom. Article 6(1) lit.(f) GDPR.
Section 5(c) During Business Transaction or Other Asset Transfers
Section 3(g) To Provide Marketing Communication. Section 3(k) With Your Consent. Section 5(f) With Your Consent	Based on your consent. Article 6(1) lit.(a) GDPR.

9. Your Privacy Rights

Depending upon applicable law where you reside or are located, you are also able to exercise your rights which include:

Your Right to be Informed

We aim to be transparent within our policy and provide you with information about how we use your personal data.

Your Right to Object

In some circumstances you can stop the processing of your personal data for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.

Where your details are used for marketing, you can opt out at any time. You are able to unsubscribe from marketing on each contact or you can contact us to object to any processing.

Your Right to Rectification

You have the right to request the correction of your personal data when it is incorrect, out of date or incomplete. If you notify us that the personal data, we hold is complete or inaccurate we will correct or complete the information as soon as possible.

Your Right to Erasure or the Right to be Forgotten

You have the right to request that your personal data be deleted; including if we no longer need it for the purpose we collected it, you withdraw your consent or you object to its processing.

Following your request, we will erase your personal data without undue delay unless the continued retention is necessary and permitted by law. If we make the personal data public, we shall take reasonable steps to inform other data controllers processing about your erasure request.

Your Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data. This can be done in circumstances where we need to verify the accuracy of the information, if you do not wish to have the information erased or you have objected to the processing of the information, and we are considering this request. Once the processing is restricted, we will only continue to process your personal data if you consent, or we have another legal basis for doing so.

Your Right to Access

You have the right to access the personal data we hold about you. Any access request will usually be free of charge and responded to within one month. We will endeavour to provide information in the format requested, but we may charge you a reasonable fee for additional copies.

Your Right to Data Portability

You have the right to receive a copy of your personal data which you gave to us. The copy will be provided in a commonly used and machine-readable format. You can also have it transmitted directly from us to another data controller, where technically possible.

Your Right Not to be Subject to Automated Decision Making and Profiling

You have the right to not be subject to solely automatic decisions (i.e., decisions that are made about you by computer without any human input) in relation to any processes that have a legal or similarly significant effect on you.

You will be notified if we make a solely automated decision which produces a legal effect or significantly affects you.

When you request to exercise your rights

You will not have to pay a fee to exercise any of the rights listed above. However, we may charge a reasonable fee if your request is clearly unfounded or excessive, including where requests are repetitive. Alternatively, we could refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data or to exercise any of your other rights. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Right to Lodge a Complaint to Your Local Data Protection Authority

If you reside in the European Countries you may have the right to lodge a complaint with your national data protection authority or equivalent regulatory body. You can find details of EEA Supervisory Authorities here: https://edpb.europa.eu/about-edpb/board/members_en. The Supervisory Authority in the UK is the Information Commissioner’s Office (ICO), available at https://ico.org.uk/make-a-complaint.

10. Data Security

How we keep your personal data safe:

We work hard to keep your information safe. We use a combination of technical, administrative, and physical controls intended to maintain the security of your personal data and protect against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use, such as

Only store your personal data on secure servers which are operated by us and hosted in third party data centres
Ensure that your personal data only accessed by staff directly employed by Infobric Ltd
Ensure our staff receive annual data security awareness training
Obtain and comply with various security focussed accreditations
Engage in independent penetration tests

Unfortunately, while we use reasonable commercial efforts to protect the data, no technology, data transmission, or system can be guaranteed to be completely secure. We cannot guarantee the security of personal data sent to our Services, and our databases or the databases of the third parties with which we may share such information. Please remember that you play a valuable part in security as well. If you feel that the security of any account you might have with us has been compromised, you should contact us immediately as described in the Who Are We Are and How Can You Contact Us section.

11. Data Retention

How long we keep your personal data:

We only keep your personal data for as long as we actually need it to provide our services.

Please remember you can contact us to remove information we store about you by using the contact information provided above.

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for analytical or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Who we empower